
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
File: Mnib05LhxcabdCDMA2gDrxJYzvk.mft (raw, json)
Hash identifier: 6oiGh22mEs31kP1VcEzuWtBoeJzEojveZ4gt5Eo/GJw=
Subject key identifier: 26:6F:D5:44:FA:98:D6:A7:43:81:98:81:6F:82:7A:17:83:81:B8:40
Authority key identifier: 32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
Certificate issuer: /CN=32789bd392e1c5c69b7420cc036803af1258cef9
Certificate serial: 019CAFB66BB159B972E72543E7255549904D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
Manifest number: 099A
Signing time: Mon 02 Mar 2026 18:01:33 +0000
Manifest this update: Mon 02 Mar 2026 18:01:33 +0000
Manifest next update: Tue 03 Mar 2026 18:01:33 +0000
Files and hashes: 1: Mnib05LhxcabdCDMA2gDrxJYzvk.crl (hash: NDDzmmVuNaWJUBHi758KKnzY2DCGGm5arbEPhI4zjEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:6b:b1:59:b9:72:e7:25:43:e7:25:55:49:90:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32789bd392e1c5c69b7420cc036803af1258cef9
Validity
Not Before: Mar 2 18:01:33 2026 GMT
Not After : Mar 3 18:01:33 2026 GMT
Subject: CN=266fd544fa98d6a7438198816f827a178381b840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:aa:6d:75:27:03:f4:64:ed:ce:ab:f6:e0:
4f:69:5c:67:eb:a1:d5:21:9a:1e:10:42:84:4b:be:
69:e1:4d:ea:a0:5b:57:da:0f:3f:b6:d9:4f:ea:19:
0f:fb:3f:a4:0a:17:73:b4:dc:c4:d1:55:75:2d:d3:
60:da:bf:c5:a2:21:3b:a1:97:be:5a:4b:25:b3:35:
57:a1:ed:ef:f1:84:16:3d:de:aa:94:8e:78:7c:e7:
f2:cd:74:16:cd:7b:77:c8:a7:f4:ed:ae:a2:42:a4:
82:53:9c:35:67:9c:80:f7:7a:16:83:55:1d:31:4d:
5d:92:15:94:a5:b9:56:81:a3:52:01:2b:42:4b:34:
1a:94:ff:4c:53:d1:f6:57:6a:ac:cd:d8:28:59:21:
c4:b6:1e:c2:d0:4f:b1:0a:70:7c:ee:35:00:73:95:
c2:b3:ca:94:51:9e:81:b0:11:48:8e:86:fa:c4:c2:
1d:51:54:1a:ec:20:c4:98:ae:42:8b:13:ea:c2:8a:
98:06:e7:60:75:40:76:41:22:d9:06:a0:67:5b:62:
c0:3b:b2:16:f7:64:66:3f:00:c0:d3:14:eb:cb:fe:
53:21:c4:69:16:3a:ab:a7:c7:02:32:af:b6:0d:fa:
80:ec:f3:2a:04:46:df:39:72:cc:45:97:f0:60:3e:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:D5:44:FA:98:D6:A7:43:81:98:81:6F:82:7A:17:83:81:B8:40
X509v3 Authority Key Identifier:
keyid:32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d0:b3:ca:12:4c:70:eb:87:e6:9e:e2:0f:2d:00:16:dd:9e:
0f:e5:aa:b9:88:2d:81:80:a4:69:56:66:f2:e4:35:58:e1:a9:
28:6c:e1:4a:a9:8e:76:5b:8a:9f:3f:59:3b:99:5c:9a:c9:c4:
5d:5d:fe:99:9e:7b:9d:fc:3d:49:9b:39:f9:7b:13:a9:6a:70:
ca:e2:8e:06:cc:33:01:0f:38:5b:51:8c:4d:23:b2:6d:12:d3:
fe:72:e5:ef:f6:69:6b:f6:ec:96:04:ab:00:39:b7:f5:e4:d6:
61:e7:ba:b7:b6:f5:de:72:e1:fb:38:72:55:c1:c2:2f:20:76:
ff:08:32:3e:17:e7:12:d7:43:f3:b7:f7:09:6b:82:ff:95:ab:
bf:2a:d8:bd:0c:5e:54:b5:3c:16:4a:94:28:32:af:5f:dc:87:
61:58:5f:55:1c:61:af:b2:df:1a:20:57:90:ca:d8:71:5e:e0:
04:a9:b1:ab:76:d9:c4:12:80:15:37:f3:76:1f:84:ac:1a:de:
f7:f2:ca:03:ee:16:27:28:e8:12:a0:a7:c2:c5:f4:e6:54:cb:
d9:13:00:47:dd:18:db:96:67:5a:86:93:0a:17:06:a0:36:49:
21:49:89:fb:9f:3e:7e:76:30:a7:13:ea:60:54:ee:50:05:46:
77:0e:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:19 2026 by rpki-client